Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: IpQ/tLaK9T4IUKPx17bTDlA3L+n7GEyBiHNyt5yOzAc=
Subject key identifier: 62:58:74:25:A1:84:C0:F4:88:D4:1F:EA:C1:48:AF:78:0F:6C:6C:9A
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 019A71B9163F449D74D2BF6EE00F4CB0A695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: 531BhpSgamPNATbJFGWIZAh/gBu3ZtLXAS7SXlgnETE=)
2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:16:3f:44:9d:74:d2:bf:6e:e0:0f:4c:b0:a6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=62587425a184c0f488d41feac148af780f6c6c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:1d:f9:69:78:f6:65:dd:2e:71:aa:da:3b:
da:e2:b6:f3:da:50:c2:77:87:80:a4:89:6b:43:96:
40:b3:c3:04:59:10:cc:3a:bf:77:78:0a:73:4b:b8:
8a:00:bd:02:f3:d6:14:0c:4f:ae:fd:12:af:ad:02:
92:17:36:c0:0f:7c:23:dc:d8:bf:7e:aa:89:39:e6:
b5:04:df:a0:4b:b5:0d:d8:26:a7:63:e0:02:ce:af:
5d:b8:b7:43:08:80:1e:00:27:40:8d:85:58:bf:c3:
d7:70:30:29:e0:9d:c9:e0:7c:fd:d1:3d:94:c7:ed:
0c:8a:a9:bc:c2:6d:0b:9f:23:eb:15:88:cd:82:1d:
4d:1e:94:c5:ec:2f:12:e9:43:58:f6:07:c3:ec:a0:
5d:d3:97:16:7d:9c:46:b6:51:0c:0a:32:a2:37:42:
18:f0:f7:56:bf:8d:57:4f:83:ad:73:8a:66:ee:d5:
1d:a1:d6:27:13:09:ec:9b:9f:56:39:e0:59:7a:7d:
13:df:2a:31:6a:fb:3e:21:86:38:ba:44:e0:6e:c8:
80:b8:00:0b:6d:33:e9:38:27:81:44:ac:59:5f:bd:
e4:c1:48:a3:31:08:a0:29:e7:46:c6:ad:74:8e:14:
b3:66:31:41:59:14:9b:50:12:a4:02:c5:71:a3:c9:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:74:25:A1:84:C0:F4:88:D4:1F:EA:C1:48:AF:78:0F:6C:6C:9A
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:7c:27:cd:8b:14:0f:9a:29:cd:52:86:ba:10:3f:2b:4b:
e4:4f:dd:22:3b:c2:4d:f3:c9:2a:bb:e7:74:dd:92:9c:04:07:
4d:ae:1c:38:d0:4c:c5:81:9d:b5:b2:d8:13:79:11:52:9f:49:
db:c9:d0:37:4c:91:5e:c9:b4:84:2a:cc:6c:b4:f0:4e:b3:7d:
be:20:10:04:d6:91:21:a4:32:74:b9:03:66:09:67:07:8e:5e:
a7:b1:0c:a9:32:cc:b8:6c:96:d5:74:6a:45:9b:de:55:eb:0f:
b0:16:58:1e:98:69:2c:ed:28:54:6d:e9:36:3f:f3:a2:a9:da:
32:ce:4a:00:88:7b:f1:a4:7d:b4:7b:21:ab:33:cb:fa:7b:57:
ab:1e:05:c9:bf:1b:6b:52:86:00:2d:1e:44:13:cc:92:40:9a:
b6:22:7d:36:56:3c:ec:94:fa:db:be:54:01:f5:cd:a7:4f:a1:
ae:f6:89:c7:c4:61:4a:09:0a:0a:3f:d9:e2:92:e6:a5:b1:a7:
9a:88:a7:9c:98:c1:f4:03:f9:fa:43:c8:1f:f8:98:0c:df:2c:
c0:b2:34:5c:51:c6:1d:e0:74:e2:2e:4a:bf:ea:ab:65:03:55:
a5:b4:44:c5:03:16:19:fc:7b:86:96:3f:74:93:1a:54:f8:46:
75:45:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:44 2025 by rpki-client